Methodologies

Looking Beyond Visible Content During Phishing Investigations

During a phishing investigation, I encountered a domain that appeared to be associated with a well-known retail brand. The domain contained login and registration pages designed to collect user credentials, yet something unusual stood out during the initial review. Despite the presence of credential-capture functionality, the targeted brand

Methodologies

Using Business Registration Records to Validate Website Claims

During a domain abuse investigation involving a suspected phishing website, one of the details that stood out was the presence of a business registration number displayed on the website. At first glance, the website appeared to represent a legitimate organization and used branding elements intended to build trust with visitors.